--- title: "How NRP Scales Global Scientific Research with Calico" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/how-nrp-scales-global-scientific-research-with-calico/" description: "Explore Calico Open Source at National Research Platform and its role in global high-performance computing and networking." --- [Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/) # How NRP Scales Global Scientific Research with Calico By [John Alexander](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/john-alexander/) on Oct 15, 2025 • 4 min read ![NRP logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/10/NRP_LOGO-cropped-300x61.png) The National Research Platform (NRP) operates a globally distributed, high-performance computing and networking environment, with an average of 15,000 pods across 450 nodes supporting more than 3,000 scientific project namespaces. With its head node in San Diego, NRP connects research institutions and data centers worldwide via links ranging from 10 to 400 Gbps, serving more than 5,000 users in 70+ locations. - Non-profit company - Uses Calico Open Source NRP is a partnership of more than 50 institutions, led by researchers at UC San Diego, University of Nebraska-Lincoln, and Massachusetts Green High Performance Computing Center and includes contributions by the National Science Foundation, the Department of Energy, the Department of Defense, and many research universities and R&E networking organizations in the US and around the world. ![Kubernetes pod and node statistics at NRP](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/10/NRP_stats.jpeg) ## Challenges ### Complex Network Visibility and Debugging NRP needed a way to diagnose connectivity problems across globally distributed storage nodes. Frequent changes to edge network configurations, ACLs, firewalls, and static routes caused blocked ports, forcing manual troubleshooting with tools such as nmap and iperf. This process slowed down root-cause analysis and problem resolution. ### Balancing Performance with Granular Security at Scale Scientific workflows demanded maximum throughput over 100/400 Gbps links and jumbo frames. Traditional host firewalls introduced unacceptable performance penalties, preventing researchers from mounting data and forcing the team to disable them. NRP required a centralized, high-performance network security solution that could enforce fine-grained policies at scale without degrading throughput. ### Managing Advanced Heterogeneous Networking NRP’s workflows relied on advanced capabilities such as Layer 2 paths over WAN using ESnet Sense and AutoGOLE, dual-stack IPv4/IPv6 support, and experiments with multipath BGP. They also needed integration with specialized hardware such as FPGAs and smartNICs for P4 packet processing. Managing this mix of protocols, services, and hardware required a flexible CNI that could support complex, multi-layer orchestration. ## Solutions ### Enhanced Observability with Calico Telemetry With the release of Calico Open Source 3.30, the National Research Platform (NRP) intends to adopt new telemetry and observability features to replace a patchwork of existing tools. One key open source observability tool is **Calico’s Goldmane API**, which enables gRPC-based ingestion of flow logs. The other is **Calico Whisker UI**, an open source tool for visualizing network flow data, these features provide deep visibility into Kubernetes network traffic. For NRP, this means they can easily see which network policies were being applied to each flow and identify issues without relying on manual tools like `nmap` or `iperf`. Instead of spending hours debugging, engineers can passively detect problems and quickly resolve them, reducing operational overhead while improving network reliability. ### Performant Network Policy Enforcement Calico’s network policies and host endpoints enabled NRP to centralize security across pods and nodes. Using Global Network Policy and a central gateway, NRP could enforce policies cluster-wide without relying on host firewalls. This preserved high throughput while delivering the required security granularity. ### Flexible Kubernetes Networking Calico’s flexibility as a CNI (Container Network Interface) allowed NRP to handle jumbo frames across mixed networks (IPv4-only, dual-stack, and low-MTU nodes) using three Calico daemonsets. Integration with Multus delegated Layer 2 networking while Calico managed Layer 3 routing. This made it possible to establish high-performance “hyperchannels” across ESnet, conduct BGP experiments, and support P4 packet analysis with FPGAs and smartNICs. ## Results - **Optimized performance and security:** NRP eliminated host firewalls, maintaining throughput while enforcing network policies with Calico. - **Enhanced research capabilities:** Flexible orchestration enabled integration of WAN services, IPv4/IPv6 dual-stack, and advanced hardware acceleration. - **Scalability and reliability:** Calico delivered a scalable foundation that supports one of the largest distributed Kubernetes clusters for scientific research. ### Customer Perspective “Calico is absolutely central to our operations; it allows us to control all network security and manage host-level firewalls across our entire cluster. This is critical because traditional firewalls severely degrade performance, which we simply cannot afford with our high-speed data flows.” — Dima Mishin, Full Stack DevOps, Architect and Magician, San Diego Supercomputer Center at NRP ## What’s Next NRP plans to extend its use of Calico telemetry to replicate advanced services such as ESnet High Touch Service, enabling deep flow analysis and troubleshooting without relying on specialized hardware. With Calico as its Kubernetes networking and security backbone, NRP is positioned to support the next generation of large-scale scientific computing. See how NRP tackles complex network challenges and scales its global scientific research with Calico. [Click here to watch our user story](https://www.youtube.com/watch?v=ZaPoVg-vwuo&t=312s). [Open Source](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/open-source/)[Project Calico](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/project-calico/) Add Tigera as a preferred source on Google to see more of our content in your search results. [![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io) ## Related posts [![What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/What-is-new-in-Calico-winter-2026.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) #### [What’s New in Calico: Winter 2026 Release](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) By [Veronika Smolik](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/veronika-smolik/) on Mar 4, 2026 AI Powered Intelligence, Unified Traffic Observability and Scalable Infrastructure Management As anyone managing one or more Kubernetes clusters knows by now, scaling can introduce an exponentially growing number of problems. The sheer volume of metrics,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/whats-new-in-calico-winter-2026-release/) [![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) #### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 25, 2026 The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) #### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 17, 2026 Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/)